On Tue, May 23, 2017 at 03:32:49AM -0400, Roger Dingledine wrote:
The better fix imo will be for Tor to stop doing behavior that the apparmor profile wants to prevent, such as trying to read directories before it has switched uids. I'll open a ticket about that once I understand it more.
https://bugs.torproject.org/22331
--Roger